This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tIUhlwtBCftFie0xid6rrYMJjug.roa File: tIUhlwtBCftFie0xid6rrYMJjug.roa (raw, json) Hash identifier: w9UyhHi+vfy7kb1KD9ZueYp82JAxijm7301x3DVTIDI= Subject key identifier: B4:85:21:97:0B:41:09:FB:45:89:ED:31:89:DE:AB:AD:83:09:8E:E8 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CD600076BCDD85306795EF54B62B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tIUhlwtBCftFie0xid6rrYMJjug.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60404 IP address blocks: 2a0c:9a40:808e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cd:60:00:76:bc:dd:85:30:67:95:ef:54:b6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48521970b4109fb4589ed3189deabad83098ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:49:4a:2c:96:cc:84:2d:8f:7c:cf:fa:32: 64:85:96:3e:94:f2:41:34:4c:84:13:71:ca:ae:51: 80:dc:19:25:1e:7e:1c:26:94:33:0e:6c:af:cc:57: a3:d5:55:4f:5f:b8:11:4e:7c:04:b2:5d:9d:a9:ac: 39:a1:36:8d:91:62:fc:3f:2f:1a:04:ce:b6:58:7d: 55:86:a2:7e:e9:91:68:a6:eb:2f:55:63:5b:30:ad: e4:19:27:7c:fd:0b:29:e0:c0:33:48:c1:72:a8:c0: 35:57:c9:6d:29:fc:2a:96:5f:e8:70:be:fe:5b:62: ce:3d:ef:be:99:d7:30:19:1e:55:97:8f:05:65:3d: 16:4a:8b:da:54:d6:dd:2c:ea:ff:d8:aa:0c:7a:78: 12:23:61:3e:75:0a:c9:c3:6d:d6:c3:56:46:7b:f5: 0b:52:e6:85:72:88:f2:8b:4a:5e:b3:2f:ea:16:b1: e1:93:e5:8b:24:b4:8c:d9:2f:40:f2:e9:f7:b0:ae: 47:bd:bb:a9:38:ed:66:12:ef:30:4a:dd:29:0d:45: 3c:16:a8:4e:0c:61:cb:21:35:bc:6e:29:08:20:ed: d3:a8:97:e8:e7:3f:c6:dd:16:b2:a3:4f:c8:64:35: 52:dc:81:fc:83:69:42:8c:d0:44:7d:a5:bb:c3:49: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:21:97:0B:41:09:FB:45:89:ED:31:89:DE:AB:AD:83:09:8E:E8 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tIUhlwtBCftFie0xid6rrYMJjug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:808e::/48 Signature Algorithm: sha256WithRSAEncryption 7c:89:2d:2a:b4:2c:ed:c5:aa:37:06:66:1b:1e:d5:8b:47:c0: dc:22:4c:a3:47:65:8e:86:51:7f:a1:90:80:8f:32:24:f4:e1: a8:5f:1c:34:f3:33:0b:12:68:15:25:64:e5:7b:f6:79:48:c5: 06:07:f5:d7:cf:01:01:0c:ea:da:96:22:63:c4:20:28:43:4c: 35:02:cd:68:73:aa:5c:1c:c8:e6:87:69:13:18:e2:57:8f:b9: c2:c6:74:cc:dd:bb:3b:05:25:f8:1b:af:22:67:bb:aa:c2:d1: bb:b4:3d:bc:dd:84:85:53:36:ec:31:83:5a:02:77:77:c4:86: 13:87:09:05:f3:47:1a:ca:4a:7f:9c:a5:00:0f:67:fb:f5:7a: d7:6f:b0:67:ad:14:66:37:44:b0:6d:41:c0:9a:78:a8:f7:7f: f6:60:ff:f1:14:bd:a7:93:9c:83:47:0e:07:3b:42:ba:81:ee: 26:cd:54:4a:88:be:e5:59:f5:08:80:03:03:0d:ab:ae:37:a3: a8:f9:84:75:8c:9b:56:7e:2e:f4:52:8e:50:2f:f7:df:28:b0: 99:c4:50:8b:9c:09:69:9e:54:5c:60:94:d5:da:68:ce:bc:3c: 13:f8:f4:4a:6f:03:41:01:65:0b:46:91:30:86:03:5b:e9:a7: df:f8:ac:43 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ps1gAHa83YUwZ5XvVLYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDg1MjE5NzBiNDEwOWZiNDU4OWVkMzE4OWRlYWJhZDgzMDk4ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRRJSiyWzIQtj3zP+jJkhZY+lPJB NEyEE3HKrlGA3BklHn4cJpQzDmyvzFej1VVPX7gRTnwEsl2dqaw5oTaNkWL8Py8a BM62WH1VhqJ+6ZFopusvVWNbMK3kGSd8/Qsp4MAzSMFyqMA1V8ltKfwqll/ocL7+ W2LOPe++mdcwGR5Vl48FZT0WSovaVNbdLOr/2KoMengSI2E+dQrJw23Ww1ZGe/UL UuaFcojyi0pesy/qFrHhk+WLJLSM2S9A8un3sK5HvbupOO1mEu8wSt0pDUU8FqhO DGHLITW8bikIIO3TqJfo5z/G3Rayo0/IZDVS3IH8g2lCjNBEfaW7w0kbzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLSFIZcLQQn7RYntMYneq62DCY7oMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvdElVaGx3dEJDZnRGaWUweGlkNnJyWU1KanVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICO MA0GCSqGSIb3DQEBCwUAA4IBAQB8iS0qtCztxao3BmYbHtWLR8DcIkyjR2WOhlF/ oZCAjzIk9OGoXxw08zMLEmgVJWTle/Z5SMUGB/XXzwEBDOraliJjxCAoQ0w1As1o c6pcHMjmh2kTGOJXj7nCxnTM3bs7BSX4G68iZ7uqwtG7tD283YSFUzbsMYNaAnd3 xIYThwkF80caykp/nKUAD2f79XrXb7BnrRRmN0SwbUHAmnio93/2YP/xFL2nk5yD Rw4HO0K6ge4mzVRKiL7lWfUIgAMDDauuN6Oo+YR1jJtWfi70Uo5QL/ffKLCZxFCL nAlpnlRcYJTV2mjOvDwT+PRKbwNBAWULRpEwhgNb6aff+KxD -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:18 2026 by rpki-client